Re: 'ENABLE_SSL' is not a known MakeMaker parameter name.

2011-06-23 Thread fchan
On 06/23, fchan wrote: perl Makefile.PL ENABLE_SSL="yes" 'ENABLE_SSL' is not a known MakeMaker parameter name. Looks like a known bug since December 2009: https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6266 It's the first google hit on:Ê "is not a know

'ENABLE_SSL' is not a known MakeMaker parameter name.

2011-06-23 Thread fchan
Hi, I didn't see it posted here but I'm checking if I'm doing something wrong here trying to enable SSL. Here is the command I entered: perl Makefile.PL ENABLE_SSL="yes" and I got this: What email address or URL should be used in the suspected-spam report text for users who want more informat

Exceeded time limit Plugin::Check::_rawbody_tests_0

2011-01-05 Thread fchan
Hello, I noticed recently (within the past two months) I'm getting this error message from spamassassin. Here is line from the maillog: Jan 5 15:07:40 s1 spamd[21160]: check: exceeded time limit in Mail::SpamAssassin::Plugin::Check::_rawbody_tests_0, skipping further tests I have set spamd

Re: sa-compile error

2010-11-12 Thread fchan
On 11/12/10 5:38 PM, fchan wrote: I was trying to do sa-compile -D on my system and I got this error message: \ first, tell us: 1) version of SA 2) version of re2c 3) what rules, other than stock SA rules do you have 4) what local rules, changes, edits do you have? 5) what operating system

sa-compile error

2010-11-12 Thread fchan
I was trying to do sa-compile -D on my system and I got this error message: cd /tmp/.spamassassin28731HM9DTNtmp cd Mail-SpamAssassin-CompiledRegexps-body_0 re2c -i -b -o scanner1.c scanner1.re re2c -i -b -o scanner2.c scanner2.re re2c: error: line 85, column 12: unexpected character: 0x1E What

Re: Error Spamassassin with pyzor

2010-06-02 Thread fchan
Dear Sirs, I have installed SA 3.3.1 with pyzor 0.5.0 on a server with CentOS 4.8, reviewing SA logs shows the following message: warn: pyzor: check failed: internal error, python traceback seen in response It should be noted that I recently updated to version 4.7 CentOS 4.8 What is wrong?

Interesting link in spam message

2010-05-25 Thread fchan
I'm recently got some spam with link to bit.ly which I did a Whois and it appears to MX server for Google/GoogleMail which is from NTT America, Inc and I'm checking if any other people seen this and if this could be a compromise of Google or something. Here is an excerpt of the message with the

Interesting email link in spam

2010-05-18 Thread fchan
I was checking some links today using Whois in a email message and found this one: emailfriendz.com Note the Technical Contact name and his email address. At least he is "honest". Frank

Re: applying patch

2010-05-18 Thread fchan
How do apply an SA patch, Running SA on FreeeBSD thx Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 136 Fax: 212-941-5563 Mailto: jnat...@familycareintl.org Before you patch any f

sa-learn error.

2010-02-11 Thread fchan
I was trying to teach spamassassin 3.3.0 today with a rather large spam message and I got this error message when I did sa-learn: Feb 11 14:47:51.262 [5414] info: archive-iterator: skipping large message The message is 279959 bytes and about 20% is Russian text and other 80% is two gif image a

Google doc link spam

2009-11-10 Thread fchan
Hi, I'm getting alot of this new Google document link spam recently. Below is an example: Return-Path: Delivered-To: fc...@molsci.org Received: (qmail 11025 invoked by uid 501); 10 Nov 2009 16:55:53 -0800 Received: from 87.217.186.215 by s1.molsci.org (envelope-from , uid 509) with qmail-scan

Re: [NEW SPAM FLOOD] www.shopXX.net

2009-07-10 Thread fchan
Don't tempt them, I already get enough spam not only from these guys. Also they will flood the network with smtp useless connections and unless you have good network attack mitigation system so you don't have a DDoS, don't tempt them. Dnia 2009-07-11, sob o godzinie 00:18 +0200, Pawe¸ T«cza pi

New method to bypass SA?

2009-06-02 Thread fchan
I recently was checking on servers that were sending out spam and found one of them had the hostname called "localhost" which I think is a attempt to bypass SA. The IP address is 222.252.188.181 which maps back to Vietnam. Also I found that a large percentage of my spam comes from Brazil and I

Stacked word sentences.

2009-05-08 Thread fchan
I'm getting this new spam which they use stacking of words to make a sentence and I would like make a rule against it. How does spamassassin handle this type of stuff? Can I use rawbody? Below is a sample of this: We're interested in hearing your thoughts on these articles, and learning abo

Perl DNS exception errors.

2009-01-28 Thread fchan
I was checking the mail logs and noticed this Perl exception error occasionally: Jan 28 14:08:26 s1 spamd[2186]: Exception: incomplete data at /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/Net/DNS/RR.pm line 513. Jan 28 14:08:26 s1 spamd[2186]: caught at /usr/lib/perl5/site_perl/5.8

Re: Trying the write a rule for the html alt text.

2008-12-02 Thread fchan
Thank you. This is what I needed. Silly of me missing that. Frank On Tue, 2008-12-02 at 14:12 -0800, fchan wrote: I'm having much spam that has html with the common alt test portion. The http link to where ever and the images always changes so I need to use the alt text portion of t

Re: Trying the write a rule for the html alt text.

2008-12-02 Thread fchan
, fchan wrote: http://pastebin.ca/1274188 domain listed in URIBL -- Benny Pedersen Need more webspace ? http://www.servage.net/?coupon=cust37098

Trying the write a rule for the html alt text.

2008-12-02 Thread fchan
I'm having much spam that has html with the common alt test portion. The http link to where ever and the images always changes so I need to use the alt text portion of the is html to key off. Below is the paste link of the html: http://pastebin.ca/1274188 Thank you, Frank

Re: Is spam volume really down

2008-11-24 Thread fchan
"Their back..." the quote form Carol Anne Freeling from the movie Poltergeist II. I don't know about you but I seen these spikes in spam today which is inline what spamcop.net sees: http://www.spamcop.net/spamgraph.shtml?spamstats http://www.spamcop.net/spamgraph.shtml?spamweek http://www.spam

Re: Is spam volume really down

2008-11-18 Thread fchan
Yes I see a drop in total messages and spam and I see similar results from http://www.spamcop.net/spamgraph.shtml?spammonth. Since they knocked off McColo, my unfortunate neighbors in the San Francisco Bay Area, my mail server has more disk space since I have been quarantining certain spam mess

Re: Major spam source, McColo, knocked offline

2008-11-12 Thread fchan
I seen the similar statistics on my mail server. I saw a drop of spam since this morning which I normally see the daily spike of spam. I wish this lull in spam will last awhile since my mail server needs a break :-) Frank > SpamCop.net - Total spam report volume: http://www.spamcop.net/spa

Re: New free blacklist: BRBL - Barracuda Reputation Block List

2008-09-22 Thread fchan
You can set up Barracuda to not to reply to spam which is default behavior, which I hate. This is the backscatter we all experienced from Barracuda devices. I set one up for a friend but it does take awhile to look for the instructions and to get this setting correct which I don't understand wh

Re: MagicSpam

2008-09-11 Thread fchan
Hi, Sorry I don't have experience with this product. I do have limited experience with Barracuda Networks appliance and I think is a great product for an e-mail filter which I had experienced with my friend to set up on their network & email server. It is easy to set up, configure and maintain

Re: Our secret is out

2008-08-15 Thread fchan
I wish that they can modify the High speed AntiRadiation Missile (HARM) or similar type of missile from other country and have it find the bot head (which is real source of the spam and not bot slaves) the blast them with those. Obviously, we need to get the hold of the bot controls and defus

Re: prefork: child states: BBBBBBB

2008-03-07 Thread fchan
Hi, What this means there there are more incoming messages than spamd daemon can handle. You have you need to change the spamd --max-children to an higher setting. You need also make sure you system can handle the extra children processes so not to lock up your system due to an spam attack. I

Re: How can all incoming emails be retained and copies are forwarded to gmail ?...

2008-03-06 Thread fchan
On a debian linux system how can all incoming emails be retained and copies of all emails are forwarded to gmail ?... particulars include It appears that you are using sendmail so you can use .forward. Here are several URL regarding this: http://www.feep.net/sendmail/tutorial/intro/forward.html

autolearn=unavailable

2008-03-05 Thread fchan
Hi, Can someone tell me what is the cause of these "autolearn=unavailable" messages and there is a possible solution. I get them occasionally but wanted to know why are they appearing. Below is a sample of the log: Mar 5 11:42:27 s1 spamd[13422]: spamd: identified spam (110.5/8.0) for qscan

Re: Emails passing through SA with valueless headers

2008-02-29 Thread fchan
Hi, This is similar to what I'm seeing. However I get question marks on my spam status. Here is a sample header what I'm seeing: Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] X-Spam-Status: No, hits=? required=? Message-ID: <[EMAIL PROTECTED]> From: "Lorena Aguilar" <[EMAIL P

Re: -max-child setting not obeyed?

2008-02-28 Thread fchan
--max-children setting, consider raising it" during spam attacks. Thank you, Frank -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/28/2008 05:16 PM, fchan wrote: | Hi, | I have set my --max-child to 30 but I look at my logs and it appears | that this is not obeyed. | | Here is my spa

-max-child setting not obeyed?

2008-02-28 Thread fchan
Hi, I have set my --max-child to 30 but I look at my logs and it appears that this is not obeyed. Here is my spamd options: SPAMDOPTIONS="-d -m 30 -H" Here is what I see in the logs: Feb 28 10:57:29 s1 spamd[15535]: prefork: child states: B Feb 28 10:57:29 s1 spamd[15535]: prefork: server

Re: Bayes R/W lock failed

2008-02-28 Thread fchan
Hi, Check your spamassassin bayes directory, in your case it's /home/spamassassin/.spamassassin/, for the bayes.lock.* files? I seen this you need to temporarily stop spamd then remove the bayes.lock.* files there. Then start spamd and it should clear this up. I think the reason for this if you

Re: Variable subject line spam.

2008-02-26 Thread fchan
Hi, Yes, I have whitelist myself. I see it as that score without the whitelist. Regards, Frank On 26/02/2008 3:21 PM, fchan wrote: Hi, Thank you Loren Wilton. I think this is best solution for me. These are not from Kohl's or any other legitimate company. The subject changes from

Re: Variable subject line spam.

2008-02-26 Thread fchan
Hi, Thank you Loren Wilton. I think this is best solution for me. These are not from Kohl's or any other legitimate company. The subject changes from month to month and the percentages change but the format remains the same for the subject line. The body uses legitimate text taken from various

Re: --max-children setting, consider raising it

2008-02-25 Thread fchan
Hi, I don't mind taking RAM since I have 3GB. I can raise the amount of child processes and I wanted to find out how much RAM does each child takes so I can decide how many max children to raise it without killing my system. Also I would like to check where to raise the max-child and I was do

Re: [OT] Yahoo Deferred

2008-02-25 Thread fchan
Hi, I had the same problem before and needed to contact yahoo.com postmaster and they resolved it within one day. Here is the yahoo.com postmaster URL: http://help.yahoo.com/l/us/yahoo/mail/postmaster/ Click on "Contact Customer Care" and select Delivery Issues. I hope this helps. Frank Sorr

Variable subject line spam.

2008-02-25 Thread fchan
Hi, I'm get alot of these February 77% OFF or variations (ie January 73% OFF and my guess March 75% OFF next month) thereof in the subject line for spam. The body always changes so I can't really key on this. I would like to make rule that subject line filter this type of spam. Thank you in a

--max-children setting, consider raising it

2008-02-22 Thread fchan
Hello, I thought I set this in /etc/rc.d/init.d/spamd for RedHat Linux but maybe I'm wrong. I see this about --max-children for spamd: -m number , --max-children=number This option specifies the maximum number of children to spawn. Spamd will spawn that number of children, then sleep in th

Re: Getting ? in spam scores.

2008-02-15 Thread fchan
.apache.org X-ASF-Spam-Status: No, hits=1.2 required=10.0 tests=SPF_NEUTRAL X-Spam-Check-By: apache.org Subject: Re: Getting ? in spam scores. From: Karsten BrÉckelmann <[EMAIL PROTECTED]> To: users@spamassassin.apache.org Content-Type: text/plain Date: Sat, 09 Feb 2008 04:14:40 +0100 Mes

Re: Getting ? in spam scores.

2008-02-09 Thread fchan
ier... On Fri, 2008-02-08 at 16:45 -0800, fchan wrote: Thank you. I have check my DNS and it appears to resolve the link correctly. What link? The spample does not show any. Also, the DNS queries relevant for SA are those to the various blacklists. By default including URI as well as IP blacklis

Re: Getting ? in spam scores.

2008-02-08 Thread fchan
message(s) examined)". Why I cannot get sa-learn to learn from this message also. Thank you for your assistance, Frank On Thu, 2008-02-07 at 14:57 -0800, fchan wrote: I'm getting spam scores (ie No, hits=? required=?) from certain types of spam messages. Most of them have phishing

Getting ? in spam scores.

2008-02-07 Thread fchan
Hi, I'm getting spam scores (ie No, hits=? required=?) from certain types of spam messages. Most of them have phishing links but I have no problem with most messages with links. I'm using qmail with qmail-scanner-2.01st on RedHat Linux ES5. Below is excerpt of a message that I get with this:

I'm still getting question marks in spam scores.

2008-01-11 Thread fchan
Hi, I updated from spamassassin 3.2.3 to 3.2.4 and I'm still getting these question marks in score from spamassassin. Here is a sample of the header I get with this message: Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: (qmail 23882 invoked by uid 501); 11 Jan 2008

Fwd: Re: Adjusting the AWL value

2005-05-26 Thread fchan
Title: Fwd: Re: Adjusting the AWL value Since we are getting off the subject of Adjusting the AWL value. Maybe I could use one or more of these to extricate certain parts of ones body from another part of the body: http://www.globalsecurity.org/military/systems/munitions/gbu-28e.htm Seriously en